Changelog

2026-09-30

Breaking Change

Lower limit on UTXOs per labelling request

Products: UTXO Management (Beta)

Scope: API + SDKs

• What's new
  The maximum number of UTXO identifiers accepted in a single labelling request has been reduced from 200 to 50.

• Impact
  Integrations submitting more than 50 identifiers in one request will need to split them into smaller batches.

Affected endpoints:

1. Attach or detach labels to/from UTXOs

Stricter validation for UTXO transaction hashes

Products: UTXO Management (Beta)

Scope: API + SDKs

• What's new
  Transaction hashes used to identify UTXOs must now be lowercase hexadecimal and no longer than 64 characters; uppercase hashes are no longer matched.

• Impact
  Integrations sending uppercase or malformed transaction hashes will need to update their values to match this stricter format.

Affected endpoints:

1. Attach or detach labels to/from UTXOs

Update required Canton onboarding parties

Products: Canton (Beta)

Scope: API + SDKs

• What's new
  Onboarding a Canton participant no longer requires a provider party id, and now requires an upgrader party id used for model upgrade authority.

• Impact
  Existing integrations must remove the provider party id and add the new upgrader party id when onboarding a Canton participant.

Affected endpoints:

1. Make a Canton call

Simplify allocation withdrawal request

Products: Canton (Beta)

Scope: API + SDKs

• What's new
  Withdrawing an allocation no longer requires specifying the vault account or asset, since these are derived automatically from the original transaction.

• Impact
  Existing integrations that send vaultAccountId or asset when withdrawing an allocation will need to remove those fields.

Affected endpoints:

1. Make a Canton call

Rename Canton offer domain values

Products: Canton (Beta)

Scope: API + SDKs

• What's new
  The values identifying an offer's domain when responding to a Canton offer have changed from plural to singular form.

• Impact
  Existing integrations that reference the plural domain values will need to be updated to use the new singular values.

Affected endpoints:

1. Answer an offer

Add structured time-in-force type field

Products: Trading (Beta)

Scope: API + SDKs

• What's new
  The time-in-force value for limit orders is now a structured object with a type field instead of a plain text value.

• Impact
  Existing integrations that use fill-or-kill time-in-force will need to update how they specify it.

Affected endpoints:

1. Create an order
2. Get order details

OAuth credentials reference an mTLS configuration

Products: Webhooks V2

Scope: API + SDKs

• What's new
  OAuth credentials now point at an mTLS configuration by webhookMtlsId, the same field and the same resource webhooks use, instead of carrying their own certificate. One certificate signed from GET /webhooks_settings/mtls_csr can serve both the token endpoint and the receiver. Deleting an mTLS configuration is refused while OAuth credentials reference it as well as webhooks; forceDelete=true detaches both and returns detachedWebhookOauthIds alongside detachedWebhookIds.

• Impact
  Customers configure and rotate the certificate for their token endpoint the same way as for delivery, and can share one configuration between them. Existing certificates on OAuth credentials are migrated to an mTLS configuration automatically.

Affected endpoints:

1. Create OAuth credentials
2. Update OAuth credentials
3. Get OAuth credentials by id
4. Get all OAuth credentials
5. Delete an mTLS configuration

Manage mTLS client certificates as their own resource

Products: Webhooks V2

Scope: API + SDKs

• What's new
  The signed client certificate moves off the webhook and onto its own resource under /webhooks_settings/mtls, with endpoints to upload, list, read, replace and delete one. Several webhooks can share a configuration, so replacing the certificate is a single call instead of one per webhook. A webhook now references it by webhookMtlsId, alongside webhookOauthId. Deleting a configuration is refused with 409 Conflict while any webhook still references it, unless forceDelete=true is passed, which detaches those webhooks and returns their ids.

• Impact
  Customers rotating an mTLS certificate used by several webhooks do it once, and can see which webhooks a configuration is in use by before removing it. Existing callers that set or read the certificate on the webhook itself must move to the new field names.

Affected endpoints:

1. Create an mTLS configuration
2. List the uploaded mTLS configurations
3. Get an mTLS configuration by id
4. Update an mTLS configuration
5. Delete an mTLS configuration

Change travelRuleProviders from fixed enum to string

Products: Compliance

Scope: API + SDKs

• What's new
  Changes the travel rule provider field from a fixed enum to a plain string to support dynamic provider lists and match actual API wire format.

• Impact
  Customers using strict enum validation must update their code to handle any string value.

Affected endpoints:

1. Look up legal entity by blockchain address

Add required proofOfOwnershipAvailable field to legal entity

Products: Compliance

Scope: API + SDKs

• What's new
  Adds a required boolean field indicating whether Proof of Ownership creation is available for a given address, and updates example values for travel rule providers.

• Impact
  Customers must update their models to include this new required field in legal entity responses.

Affected endpoints:

1. Look up legal entity by blockchain address

Added

Detailed errors for failed UTXO labelling

Products: UTXO Management (Beta)

Scope: API + SDKs

• What's new
  When a UTXO labelling request can't be completed, the response now lists each identifier that blocked it along with the specific reason it failed.

• Impact
  Customers can identify exactly which identifiers failed and why, and resubmit the request with only the valid ones.

Affected endpoints:

1. Attach or detach labels to/from UTXOs

Delete console users via API (beta)

Products: Console User

Scope: API + SDKs

• What's new
  Adds an endpoint to request deletion of a console user, which goes through the workspace's configured approval policy before the user is removed.

• Impact
  Customers can trigger console user deletion programmatically instead of using the console UI; this is a non-breaking addition and existing integrations continue to work.

Affected endpoints:

1. [Request d...

Changelog

2026-09-23

SDK and CLI updates: TypeScript SDK v32.0.0 • Python SDK v32.0.0 • Java SDK v32.0.0 • CLI v12.0.0

Breaking Change

Move the mTLS CSR endpoint under webhook settings and add ECDSA support

Products: Webhooks V2

Scope: API + SDKs

• What's new
  The mTLS CSR endpoint moves from GET /webhooks/mtls/csr to GET /webhooks_settings/mtls_csr, alongside the other webhook settings resources. It also accepts an optional keyAlgorithm query parameter, RSA or ECDSA, and echoes the algorithm the CSR was issued for back on the response.

• Impact
  Customers can request ECDSA-based CSRs for smaller, faster certificate issuance. Callers of the previous path must move to the new one.

Affected endpoints:

1. Get mTLS CSR

Added

Add transfer status to internal transfers

Products: Exchange accounts

Scope: API + SDKs

• What's new
  Internal transfer responses now include an optional status field and a systemMessages array describing the health of the transfer, populated when the transfer is processed through the transaction manager flow.

• Impact
  Customers can see the outcome and any system messages for an internal transfer directly in the response; existing integrations continue to work since both fields are optional.

Affected endpoints:

1. Internal transfer for exchange accounts

Add Compliance Orchestrator API (private beta)

Products: Compliance Orchestrator

Scope: API + SDKs

• What's new
  Adds new Compliance Orchestrator endpoints for triggering on-demand compliance screenings, retrieving screening results, and managing workflow configurations.

• Impact
  Customers enrolled in the private beta can programmatically screen addresses and transactions before they exist on-chain.

Affected endpoints:

1. Trigger a Compliance Orchestrator screening
2. Get a Compliance Orchestrator screening's result
3. Get a Compliance Orchestrator workflow
4. Update a Compliance Orchestrator workflow's status

Add approval request approve endpoint (beta)

Products: Approvals (Beta)

Scope: API + SDKs

• What's new
  Adds a beta endpoint to approve a pending approval request by signing the request's signable data with a registered approval API key.

• Impact
  Customers can programmatically approve approval requests through the API instead of using the Console.

Affected endpoints:

1. Approve an approval request

Add approval key management endpoints (beta)

Products: Approvals (Beta)

Scope: API + SDKs

• What's new
  Adds beta endpoints to register, list, and delete approval public keys for API users, enabling cryptographic signing of approval requests.

• Impact
  Customers can manage approval signing keys for API users through the API.

Affected endpoints:

1. Register an approval key
2. List approval keys
3. Delete an approval key

Add Compliance Orchestrator screening endpoints (beta)

Products: Compliance Orchestrator

Scope: API + SDKs

• What's new
  Adds private beta endpoints to trigger on-demand compliance screenings against active workflows and retrieve screening results with audit logs.

• Impact
  Customers can programmatically run compliance screenings before transactions exist on-chain.

Affected endpoints:

1. Trigger a Compliance Orchestrator screening
2. Get a Compliance Orchestrator screening's result

Changed

Token request authorization header rules

Products: Webhooks V2

Scope: API + SDKs

• What's new
  An authorization header can be set on the token request to your authorization server when credentials are sent in the request body, and is rejected when they are sent in that header instead.

• Impact
  Customers whose token endpoint sits behind a gateway can supply their own authorization header, while conflicting combinations are rejected up front.

Affected endpoints:

1. Create OAuth credentials
2. Update OAuth credentials

Custom header limit counted per name

Products: Webhooks V2

Scope: API + SDKs

• What's new
  The ten-header limit on webhook custom headers is counted per header name rather than per delivered header line, and OAuth bearer tokens are cached until they expire instead of being fetched for every delivery.

• Impact
  Customers can attach multi-value headers without consuming the limit, and authorization servers receive far fewer token requests.

Affected endpoints:

1. Create OAuth credentials
2. Get all OAuth credentials
3. Update OAuth credentials

Authorization header and OAuth are exclusive

Products: Webhooks V2

Scope: API + SDKs

• What's new
  A webhook can use either OAuth credentials or its own authorization custom header, but not both, and the header now accepts only a single string value.

• Impact
  Customers should configure a webhook with either OAuth credentials or an authorization header; combining the two is not supported.

Affected endpoints:

1. Create a new webhook
2. Update webhook

Clear OAuth credential maps with a null value

Products: Webhooks V2

Scope: API + SDKs

• What's new
  The custom claims, body parameters and headers on stored OAuth credentials can now be emptied in one step by setting the whole field to null, in addition to deleting individual keys.

• Impact
  Customers can clear an entire map without listing every key, and requests that previously failed with a validation error now succeed.

Affected endpoints:

1. Update OAuth credentials

Fixed

Clarify contract parameter value types

Products: Contract Interactions, Contract Templates, Deployed Contracts, Tokenization

Scope: API + SDKs

• What's new
  The documentation for a contract parameter's value now explains that its shape follows the ABI type: strings for text and addresses, numbers for integers, booleans, arrays, and nested entries for tuples.

• Impact
  Customers get accurate guidance on how to supply non-string parameter values when interacting with contracts.

Affected endpoints:

1. Deploy contract
2. Get deterministic address for contract deployment
3. Call a read function on a deployed contract
4. Call a write function on a deployed contract
5. Issue a token on one or more blockchains
6. [Issue a new token](https://developers.fireblock...

Changelog

2026-09-15

SDK and CLI updates: TypeScript SDK v31.0.0 • Python SDK v31.0.0 • Java SDK v31.0.0 • CLI v11.0.0

Breaking Change

Remove inline webhook OAuth schemas

Products: Webhooks V2

Scope: API + SDKs

• What's new
  Removes the deprecated inline OAuth configuration schema in favor of the shared OAuth credentials model managed via dedicated endpoints. Removes the deprecated inline OAuth response schema in favor of the shared OAuth credentials model managed via dedicated endpoints.

• Impact
  Customers must migrate from inline OAuth configuration to using shared OAuth credentials referenced by ID.

Affected endpoints:

1. Create a new webhook
2. Update webhook
3. Get all webhooks
4. Get webhook by id
5. Delete webhook

Replace inline oauth object with webhookOauthId reference

Products: Webhooks V2

Scope: API + SDKs

• What's new
  Replaces the inline oauth configuration object with a webhookOauthId field that references shared OAuth credentials managed via the dedicated OAuth credentials endpoints. Replaces the inline oauth response object with a webhookOauthId field that references shared OAuth credentials managed via the dedicated OAuth credentials endpoints.

• Impact
  Customers must update webhook creation requests to use webhookOauthId instead of the inline oauth object. Customers must update webhook update requests to use webhookOauthId instead of the inline oauth object. Customers must update code that reads webhook responses to use webhookOauthId instead of the inline oauth object.

Affected endpoints:

1. Create a new webhook
2. Update webhook
3. Get all webhooks
4. Get webhook by id
5. Delete webhook

Rename webhook OAuth operation IDs and schemas

Products: Webhooks V2

Scope: API + SDKs

• What's new
  Renames OAuth-related operation IDs and schema references from OAuth to Oauth casing to ensure SDK generators produce consistent method and class names instead of awkward o_auth identifiers.

• Impact
  Customers using SDKs must update their code to reference the new method and class names.

Affected endpoints:

1. Create OAuth credentials
2. Get all OAuth credentials
3. Get OAuth credentials by id
4. Update OAuth credentials
5. Delete OAuth credentials

Added

Add supported fiat account types to FiatAccountType

Products: Fiat accounts

Scope: API + SDKs

• What's new
  Expands the FiatAccountType enum to include all supported fiat banking providers (BLINC, CrossRiver, Fifth Third, Kingdom Bank, Lynq, N3XT, Sygnum Connect, Transfero, and more) plus an OTHER fallback for unrecognized types.

• Impact
  Customers receive more specific fiat account type values in API responses.

Affected endpoints:

1. Find a specific fiat account
2. List fiat accounts

Add credentials_replaced webhook events

Products: Webhooks V2

Scope: API + SDKs

• What's new
  Adds two new event types to the webhook events enum: exchange_account.credentials_replaced and connected_account.credentials_replaced, emitted when the API credentials of an exchange or connected account are replaced.

• Impact
  Customers can now subscribe to notifications when account API credentials are replaced.

Affected endpoints:

1. Get all notifications by webhook id
2. Create a new webhook
3. Get all webhooks
4. Get notification by id
5. Resend notifications by query
6. Resend failed notifications
7. Get webhook by id
8. Update webhook
9. Delete webhook

Add connected account credentials update endpoint (beta)

Products: Connected Accounts (Beta)

Scope: API + SDKs

• What's new
  Adds a beta endpoint to replace API credentials for connected accounts, with pending mobile approval workflow and webhook notifications.

• Impact
  Customers can programmatically update connected account API credentials through the API.

Affected endpoints:

1. Update connected account credentials

Add reject approval request endpoint (beta)

Products: Approvals (Beta)

Scope: API + SDKs

• What's new
  Adds a beta endpoint to reject a pending approval request as the authenticated API user without requiring a signature.

• Impact
  Customers can programmatically reject pending approval requests through the API.

Affected endpoints:

1. Reject an approval request

Changed

Allow Authorization header in webhook custom headers

Products: Webhooks V2

Scope: API + SDKs

• What's new
  The Authorization header is no longer reserved for webhooks. When OAuth credentials are attached, both the custom Authorization value and the bearer token are sent as separate header lines.

• Impact
  Customers can now provide their own Authorization header value for webhook endpoints that require static credentials.

Affected endpoints:

1. Create a new webhook
2. Create OAuth credentials
3. Update OAuth credentials

Fixed

Correct custom header value size limit documentation

Products: Webhooks V2

Scope: API + SDKs

• What's new
  Corrects the webhook custom header documentation to reflect the actual size limit: there is no per-value character limit, and the whole map must be under 16 KB of UTF-8.

• Impact
  Customers can now rely on accurate documentation showing that individual header values have no length limit, with only the 16 KB total map size constraint.

Affected endpoints:

1. Create a new webhook
2. Update webhook
3. Create OAuth credentials

Changelog

2026-09-08

SDK and CLI updates: TypeScript SDK v30.0.0 • Python SDK v30.0.0 • Java SDK v30.0.0 • CLI v10.0.0

Breaking Change

Add OAuth auth methods and custom fields support

Products: Webhooks V2

Scope: API + SDKs

• What's new
  Adds documentation for merge semantics when updating OAuth credential custom fields, where keys with values are upserted and keys with null are deleted. Adds authMethod field and customJwtClaims, customBodyParams, customHeaders fields to OAuth credential creation requests. Improves description clarity for the delete OAuth credentials response schema. Adds authMethod field and customJwtClaims, customBodyParams, customHeaders update schemas with merge semantics documentation. Adds authMethod as a required response field and read-only arrays for customJwtClaims, customBodyParams, customHeaders showing configured key names without values. Adds schema for custom body parameters on OAuth token requests, supporting string values and write-only storage with read-only name arrays. Adds schema for updating custom body parameters with merge semantics where null deletes a parameter. Adds schema for custom HTTP headers on OAuth token requests, supporting string values with case-insensitive matching and write-only storage. Adds schema for updating custom token request headers with merge semantics where null deletes a header. Adds schema for custom JWT claims used with client_secret_jwt authentication, supporting any JSON type except null with write-only storage. Adds schema for updating custom JWT claims with merge semantics where null deletes a claim.

• Impact
  Customers can use key-by-key merge behavior when updating OAuth credential custom fields.

Affected endpoints:

1. Update OAuth credentials
2. Create OAuth credentials
3. Get all OAuth credentials

Added

Python SDK idle connection timeout support

Products:

Scope: Python-SDK

• What's new
  Connections idle for more than 30 seconds are now reopened instead of reused. the limit is configurable with connection_idle_timeout_sec.

• Impact
  Existing integrations continue to work unchanged.

Affected endpoints:

Add Canton calls and offer response endpoints (beta)

Products: Canton (Beta)

Scope: API + SDKs

• What's new
  Publishes the beta API contract for Canton network calls and offer responses - participant onboarding, end-investor management, allocation operations, and transfer workflows. The endpoints are internal-only in this release and the downstream handlers are not implemented yet.

• Impact
  No customer-facing change yet. The contract is published so SDKs and integrations can be built against it; the routes are gated behind an internal feature flag and unimplemented domains return HTTP 501.

Affected endpoints:

1. Make a Canton call
2. Answer an offer

Add approval requests endpoints (beta)

Products: Approvals (Beta)

Scope: API + SDKs

• What's new
  Adds beta endpoints to list pending approval requests and retrieve individual requests by ID, with support for pagination, quorum status, and cross-user or workspace-wide queries.

• Impact
  Customers can programmatically access and monitor approval requests through the API.

Affected endpoints:

1. List approval requests
2. Get a single approval request

Add webhook OAuth credentials management endpoints

Products: Webhooks V2

Scope: API + SDKs

• What's new
  Adds endpoints to create, list, retrieve, update, and delete reusable OAuth client credential sets that can be shared across multiple webhooks for centralized secret rotation.

• Impact
  Customers can manage OAuth credentials separately from webhooks, enabling easier credential rotation across multiple webhook configurations.

Affected endpoints:

1. Create OAuth credentials
2. Get all OAuth credentials
3. Get OAuth credentials by id
4. Update OAuth credentials
5. Delete OAuth credentials

Add hasNativeAssets field to UTXO outputs

Products: UTXO Management (Beta)

Scope: API + SDKs

• What's new
  Adds an optional boolean field to indicate whether a UTXO carries Cardano native assets (tokens).

• Impact
  Customers can now detect encumbered ADA outputs when managing UTXO-based deposits.

Affected endpoints:

1. Attach or detach labels to/from UTXOs
2. List unspent outputs (UTXOs)

Add completionTime to staking transactions

Products: Staking

Scope: API + SDKs

• What's new
  Adds an optional completionTime field to PositionRelatedTransaction that indicates when Cosmos unbonding is scheduled to end.

• Impact
  Integrators can track when unbonding funds will be released on Cosmos-family chains.

Affected endpoints:

1. List related transactions for a position

Add 5 missing webhook event types to WebhookEvent enum

Products: Webhooks V2

Scope: API + SDKs

• What's new
  Adds 5 new event types to the webhook events enum: transaction.alert.stuck, vault_account.bulk_create_job_started, vault_account.bulk_create_job_ended, vault_account.asset.bulk_add_job_started, and vault_account.asset.bulk_add_job_ended, bringing the enum in sync with deployed webhook-events 1.32.0.

• Impact
  Customers can now subscribe to stuck transaction alerts and bulk vault account/asset job events via the API.

Affected endpoints:

1. Get all notifications by webhook id
2. Create a new webhook
3. Get all webhooks
4. Get notification by id
5. Resend notifications by query
6. Resend failed notifications
7. Get webhook by id
8. Update webhook
9. Delete webhook

Add requestedFeeCurrency to transaction responses

Products: Transactions

Scope: API + SDKs

• What's new
  Adds the requestedFeeCurrency field showing which asset was requested at transaction creation to pay Tempo transaction fees.

• Impact
  Customers can now see which fee-paying asset was originally requested when retrieving transaction details.

Affected endpoints:

1. Get a specific transaction by external transaction ID
2. Get a specific transaction by Fireblocks transaction ID
3. Get transaction history

Changed

Add subProviders field to trading response schemas

Products: Trading (Beta)

Scope: API + SDKs

• What's new
  Introduces response-only schema variants...

Changelog

2026-09-01

Breaking Change

Fix validBefore/validAfter semantics in TRLink policy rules

Products: Transactions

Scope: API + SDKs

• What's new
  Corrects the documentation for validBefore and validAfter fields to accurately describe their behavior as relative durations (seconds since wait/screening step started) rather than absolute Unix timestamps.

• Impact
  Customers should update their implementations to use relative durations in seconds instead of Unix timestamps for these fields.

Affected endpoints:

1. Get a specific transaction by external transaction ID
2. Get a specific transaction by Fireblocks transaction ID
3. Get transaction history

Fix validBefore/validAfter semantics in TRLink policy rules

Products: TRLink

Scope: API + SDKs

• What's new
  Corrects the documentation for validBefore and validAfter fields to accurately describe their behavior as relative durations (seconds since wait/screening step started) rather than absolute Unix timestamps.

• Impact
  Customers should update their implementations to use relative durations in seconds instead of Unix timestamps for these fields.

Affected endpoints:

1. Get TRLink policy

Fix validBefore/validAfter semantics in TRLink policy rules

Products: Compliance

Scope: API + SDKs

• What's new
  Corrects the documentation for validBefore and validAfter fields to accurately describe their behavior as relative durations (seconds since wait/screening step started) rather than absolute Unix timestamps.

• Impact
  Customers should update their implementations to use relative durations in seconds instead of Unix timestamps for these fields.

Affected endpoints:

1. Provides all the compliance details for the given screened transaction.

Remove type field from security finding responses

Products: Security Posture Management

Scope: API + SDKs

• What's new
  Removes the type field from security finding schemas and updates example data to reflect a different finding scenario.

• Impact
  Clients should no longer expect the type field in security finding responses and must update any code that depends on this field.

Affected endpoints:

1. Get a FSPM security finding by ID
2. Update a FSPM security finding by ID
3. Get FSPM security findings

Added

Add contacts list endpoint

Products: Contacts

Scope: API + SDKs

• What's new
  Adds a paginated endpoint to list workspace address book contacts with filtering by name, type, tags, access control, container, and archive status.

• Impact
  Customers can programmatically retrieve and filter their address book contacts through the API.

Affected endpoints:

1. List contacts

Add feeCurrency field for Tempo transactions (beta)

Products: Off exchanges, Transactions

Scope: API + SDKs

• What's new
  Adds an optional feeCurrency field to the transaction request schema, allowing users to specify which asset to use for paying network fees on Tempo-based transactions.

• Impact
  Customers using Tempo can now control which asset pays transaction fees.

Affected endpoints:

1. Create a new transaction
2. Estimate transaction fee
3. Add Collateral
4. Remove Collateral

Add AMOUNT_ABOVE_MAXIMUM failure reason

Products: Trading (Beta)

Scope: API + SDKs

• What's new
  Adds a new enum value to indicate when a trading operation fails because the requested amount exceeds the maximum allowed limit.

• Impact
  Customers can now programmatically detect and handle amount-too-large errors in trading operations.

Affected endpoints:

1. Create an order
2. Get order details

---

Changelog

2026-08-26

Breaking Change

Remove deprecated FSPM category filter values

Products: Security Posture Management

Scope: API + SDKs

• What's new
  Removes ACCESS_CONTROL, ADMIN_MANAGEMENT, SECURITY, and CONFIGURATION values from the category filter parameter and updates the endpoint description text.

• Impact
  API requests using the removed category filter values will receive validation errors.

Affected endpoints:

1. Get FSPM security findings

Added

Add FSPM security finding update endpoint

Products: Security Posture Management

Scope: API + SDKs

• What's new
  Adds an endpoint to accept or reopen FSPM security findings by setting the status to ACCEPTED or OPEN, with a required reason when accepting.

• Impact
  Customers can programmatically manage FSPM finding statuses through the API.

Affected endpoints:

1. Get a FSPM security finding by ID
2. Update a FSPM security finding by ID

Add FSPM security finding details endpoint

Products: Security Posture Management

Scope: API + SDKs

• What's new
  Adds an endpoint to retrieve detailed information about a specific FSPM security finding by its ID, including compliance requirements, risk explanation, and mitigation guidance.

• Impact
  Customers can now fetch complete details for individual security findings programmatically.

Affected endpoints:

1. Get a FSPM security finding by ID

---

Changelog

2026-08-18

Breaking Change

Java SDK async methods no longer declare throws

Products:

Scope: Java-SDK

• What's new
  Asynchronous Java SDK methods no longer declare a checked exception that can never be thrown; call failures continue to arrive through the returned future.

• Impact
  Code that wraps a Java SDK call in a try/catch for the API exception will stop compiling until that unreachable catch block is removed.

Affected endpoints:

Fix Travel Rule legalPerson name schema for IVMS101 compliance

Products: Off exchanges, Transactions, Travel Rule

Scope: API + SDKs

• What's new
  Fixes the Travel Rule legal person name schema to use the IVMS101-compliant array structure with proper name type codes (LEGL, SHRT, TRAD) instead of the incorrect flat object format.

• Impact
  Customers must update Travel Rule integrations to use the new array-based name identifier structure.

Affected endpoints:

1. Validate Full Travel Rule Transaction
2. Create a new transaction
3. Estimate transaction fee
4. Add Collateral
5. Remove Collateral

Fix Travel Rule legalPerson name schema for IVMS101 compliance

Products: Travel Rule

Scope: API + SDKs

• What's new
  Fixes the Travel Rule legal person name schema to use the IVMS101-compliant array structure with proper name type codes (LEGL, SHRT, TRAD) instead of the incorrect flat object format.

• Impact
  Customers must update Travel Rule integrations to use the new array-based name identifier structure.

Affected endpoints:

1. Validate Full Travel Rule Transaction

Added

Add ETH staking consolidation and withdrawal ETA fields

Products: Staking

Scope: API + SDKs

• What's new
  Adds three new optional fields to EthereumBlockchainData: estimatedSourceExitTime, estimatedConsolidationTime, and estimatedWithdrawalTime to surface timing estimates for in-flight ETH validator consolidations and withdrawals.

• Impact
  Customers can now track estimated completion times for pending ETH staking consolidations and withdrawals via the API.

Affected endpoints:

1. Get position details
2. List staking positions
3. List staking positions (Paginated)

Add gaslessInfo to transaction responses

Products: Transactions

Scope: API + SDKs

• What's new
  Adds a new gaslessInfo object to transaction responses containing relay and meta-transaction details including tenant and vault account information.

• Impact
  Customers can identify meta-transactions and see which relay tenant sponsored the gas fees.

Affected endpoints:

1. Get a specific transaction by external transaction ID
2. Get a specific transaction by Fireblocks transaction ID
3. Get transaction history

Add new ReasonForPaymentEnum values

Products: Trading (Beta)

Scope: API + SDKs

• What's new
  Adds three new payment reason values: CORPORATE_INVESTMENT, INTER_COMPANY_TRANSFER, and OFFICE_OPERATING_EXPENSES to support additional corporate payment use cases.

• Impact
  Customers can now specify additional payment reasons when creating trading orders.

Affected endpoints:

1. Create an order

Add FSPM security findings endpoint

Products: Security Posture Management

Scope: API + SDKs

• What's new
  Adds an endpoint to retrieve paginated security posture findings for a workspace, with filtering by severity, category, and status.

• Impact
  Customers with Security Admin or Security Auditor roles can programmatically retrieve security posture findings.

Affected endpoints:

1. Get FSPM security findings

Fixed

Document Owner and Viewer roles for staking endpoints

Products: Staking

Scope: API + SDKs

• What's new
  Adds missing Owner and Viewer roles to endpoint permission documentation for staking list endpoints. These roles were already permitted at runtime but not documented.

• Impact
  Customers with Owner or Viewer roles now see accurate permission documentation for staking endpoints.

Affected endpoints:

1. List staking positions
2. List staking positions (Paginated)
3. List staking providers

---

Changelog

2026-08-10

Breaking Change

Make ContractAttributes fields optional

Products: Contract Templates

Scope: API + SDKs

• What's new
  Removes the required constraint from useCases, standards, and auditor fields in the ContractAttributes schema to match actual API behavior where these fields may be absent for non-EVM templates.

• Impact
  SDK-generated types for these fields change from required/non-nullable to optional/nullable, requiring code updates where these fields are accessed.

Affected endpoints:

1. List all contract templates
2. Upload contract template
3. Return contract template by id

Changed

Expand TravelRuleVASP response schema documentation

Products: Travel Rule

Scope: API + SDKs

• What's new
  Documents additional fields returned by the Travel Rule VASP endpoints, including GLEIF registry data, compliance phases, and regulatory status. Also clarifies fields parameter behavior and notes that unrecognized fields should be ignored.

• Impact
  Customers can now use the full set of VASP fields returned by the API.

Affected endpoints:

1. Get All VASPs
2. Get VASP details

---

Changelog

2026-08-02

Breaking Change

Rename issuance field to inflation in staking rewards

Products: Staking

Scope: API + SDKs

• What's new
  Renames the issuance reward field to inflation in Solana staking rewards breakdown to better reflect the reward source.

• Impact
  Customers using the issuance field in SolanaRewardsBreakdown responses must update their code to use inflation instead.

Affected endpoints:

1. Get position details
2. List staking positions
3. List staking positions (Paginated)

Make rewardsAmount nullable in staking schemas

Products: Staking

Scope: API + SDKs

• What's new
  The rewardsAmount field can now be null for Cosmos-family chains where reward tracking is not supported, instead of returning a misleading zero value.

• Impact
  SDK consumers using strict type checking may need to update their code to handle null values for this field.

Affected endpoints:

1. Get position details
2. List staking positions
3. List staking positions (Paginated)

Remove deprecated estimatedAnnualReward from staking

Products: Staking

Scope: API + SDKs

• What's new
  Removes the deprecated estimatedAnnualReward field from the AdditionalInfo schema, aligning the spec with actual staking service behavior.

• Impact
  Clients should stop referencing estimatedAnnualReward as it has not been populated since November 2025.

Affected endpoints:

1. Get chain-level staking parameters

Added

Add estimatedActivationTime to ETH staking positions

Products: Staking

Scope: API + SDKs

• What's new
  Adds optional estimatedActivationTime field to EthereumBlockchainData schema, showing when pending ETH positions will activate.

• Impact
  Customers can now see estimated activation times for pending or activating ETH staking positions.

Affected endpoints:

1. Get position details
2. List staking positions
3. List staking positions (Paginated)

Add custom HTTP headers support for webhooks

Products: Webhooks V2

Scope: API + SDKs

• What's new
  Adds an optional customHeaders field to webhook configuration, allowing customers to attach up to 10 custom HTTP headers to webhook notifications.

• Impact
  Customers can configure webhooks with custom headers for enhanced integration flexibility.

Affected endpoints:

1. Create a new webhook
2. Update webhook
3. Get all webhooks
4. Get webhook by id
5. Delete webhook

Add new FailureReason enum values for CPN off-ramp orders

Products: Trading (Beta)

Scope: API + SDKs

• What's new
  Adds MISSING_DESTINATION_DETAILS and MISSING_WORKSPACE_DETAILS enum values to indicate when CPN off-ramp orders fail due to missing whitelisted destination or workspace institutional details.

• Impact
  Customers can now identify specific reasons for CPN off-ramp order failures related to missing configuration details.

Affected endpoints:

1. Create an order
2. Get order details

Add OAuth 2.0 authentication support for webhooks

Products: Webhooks V2

Scope: API + SDKs

• What's new
  Adds optional OAuth 2.0 client credentials configuration to webhooks, enabling automatic bearer token authentication when delivering webhook events.

• Impact
  Customers can now configure webhooks to authenticate with OAuth 2.0-protected endpoints.

Affected endpoints:

1. Create a new webhook
2. Update webhook
3. Get all webhooks
4. Get webhook by id
5. Delete webhook

Add fiat off-ramp payment rails for six regions

Products: Trading (Beta)

Scope: API + SDKs

• What's new
  Adds OpenAPI schemas and destination types for CIPS (China), NEQUI (Colombia), FPS_UK (UK), FPS_HK (Hong Kong), InstaPay, and PesoNet (Philippines) payment rails.

• Impact
  Customers can use these new payment rails for fiat off-ramp transfers to China, Colombia, UK, Hong Kong, and the Philippines.

Affected endpoints:

1. Create an order
2. Get order details

Changed

Add whitelisted address schemas for six CPN rails

Products: External wallets

Scope: API + SDKs

• What's new
  Adds payment info schemas for CIPS, NEQUI, FPS_UK, FPS_HK, INSTA_PAY, and PESONET rails to support external wallet whitelisting.

• Impact
  Customers can now configure whitelisted addresses for these six payment rails.

Affected endpoints:

1. Add an asset to an external wallet.

Add fiat off-ramp payment rails for six regions

Products: Trading (Beta)

Scope: API + SDKs

• What's new
  Adds OpenAPI schemas and destination types for CIPS (China), NEQUI (Colombia), FPS_UK (UK), FPS_HK (Hong Kong), InstaPay, and PesoNet (Philippines) payment rails.

• Impact
  Customers can use these new payment rails for fiat off-ramp transfers to China, Colombia, UK, Hong Kong, and the Philippines.

Affected endpoints:

1. Create an order
2. Get order details
3. Get all offers
4. Create a quote
5. Get rates
6. Get trading provider by ID
7. Get providers

---

Changelog

2026-07-23

Breaking Change

Promote Earn endpoints from beta to GA

Products: Earn

Scope: API + SDKs

• What's new
  Removes the beta designation from all Earn endpoints, changing the tag from Earn (Beta) to Earn and removing beta disclaimer notes.

• Impact
  SDK-generated client code will use updated class and method names based on the new Earn tag.

Affected endpoints:

1. List earn lending actions
2. Create and execute a lending action (deposit or withdraw)
3. Get a single earn lending action
4. Get list of earn opportunities
5. Get list of earn positions
6. Get list of earn providers
7. Approve earn provider terms of service

Fix TransactionFee schema field types to string

Products: Transactions

Scope: API + SDKs

• What's new
  Corrects the gasPrice, baseFee, and priorityFee field types from number to string to align the OpenAPI spec with actual API behavior.

• Impact
  SDK-generated code will now correctly type transaction fee fields as strings, matching the actual API response format.

Affected endpoints:

1. Estimate transaction fee

Remove sortBy query parameter from allowlist endpoint

Products: Connected Accounts (Beta)

Scope: API + SDKs

• What's new
  Removes the sortBy query parameter that allowed sorting by addedAt or lastSyncedAt from the connected accounts allowlist endpoint.

• Impact
  Clients currently using the sortBy parameter will need to remove it from their requests; results will now use the default sorting behavior.

Affected endpoints:

1. Get allowlist for connected account

Added

Add programCallDecodedData for Solana transactions

Products: Transactions

Scope: API + SDKs

• What's new
  Adds a new top-level field to transaction responses that provides decoded instruction data for Solana PROGRAM_CALL operations, including Fireblocks-injected instructions.

• Impact
  Customers can access decoded Solana instruction details directly from transaction responses without manual decoding.

Affected endpoints:

1. Get a specific transaction by external transaction ID
2. Get a specific transaction by Fireblocks transaction ID
3. Get transaction history

Add allowedEntityTypes support to tags API

Products: Tags, Vaults

Scope: API + SDKs

• What's new
  Adds optional allowedEntityType query filter to list tags and allowedEntityTypes field to tag creation and responses.

• Impact
  Customers can now specify which entity types a tag can be attached to and filter tags accordingly.

Affected endpoints:

1. Get list of tags
2. Get a tag
3. Update a tag
4. Get vault accounts
5. Create a new vault account
6. Get a vault account by ID
7. Get vault accounts (Paginated)

Add allowedEntityTypes support to tags API

Products: Tags

Scope: API + SDKs

• What's new
  Adds optional allowedEntityType query filter to list tags and allowedEntityTypes field to tag creation and responses.

• Impact
  Customers can now specify which entity types a tag can be attached to and filter tags accordingly.

Affected endpoints:

1. Get list of tags

Add ORANGE to Mobile Money provider enum

Products: External wallets

Scope: API + SDKs

• What's new
  Adds ORANGE as a supported mobile money service provider in the MomoPaymentInfo schema for external wallet addresses.

• Impact
  Customers can now specify ORANGE as a provider when whitelisting Mobile Money external wallet addresses.

Affected endpoints:

1. Add an asset to an external wallet.

Add Blockchain Link management endpoints (beta)

Products: Blockchain link (Beta)

Scope: API + SDKs

• What's new
  Adds beta endpoints to create, list, retrieve, update, delete, activate, and validate tenant-managed custom blockchains.

• Impact
  Customers can register and manage their own EVM-compatible blockchains through the API.

Affected endpoints:

1. Create a new blockchain
2. List blockchains with pagination and filtering
3. Get tenant billing info
4. Get the test wallet address
5. Get a blockchain by ID
6. Update a blockchain
7. Delete a blockchain
8. Activate a blockchain (triggers activation workflow)
9. Trigger validation workflow

Add USDC Gateway deposit automation endpoints (beta)

Products: Vaults

Scope: API + SDKs

• What's new
  Adds beta endpoints to configure, read, update, and disable automated USDC Gateway deposits for vault accounts on a recurring schedule.

• Impact
  Customers can automate USDC deposits into Gateway wallets without manual intervention.

Affected endpoints:

1. Read the USDC Gateway deposit automations for a vault account
2. Set up a USDC Gateway deposit automation for a vault account
3. Change a USDC Gateway deposit automation
4. Stop a USDC Gateway deposit automation's schedule

Add UTXO label and amount filters to max spendable (beta)

Products: Vaults

Scope: API + SDKs

• What's new
  Adds optional query parameters to filter UTXOs by labels (AND/OR logic), address, and amount range when calculating max spendable amount.

• Impact
  Customers can calculate max spendable amounts using only UTXOs matching specific labels, addresses, or amount ranges.

Affected endpoints:

1. Get max spendable amount in a transaction

Add rescreen endpoint for rejected transactions

Products: Compliance

Scope: API + SDKs

• What's new
  Adds an endpoint to re-run compliance screening on incoming transactions that were rejected or failed by screening checks, with an option to reset the travel rule message.

• Impact
  Customers can programmatically retry compliance screening on rejected transactions instead of manually handling...